Skip to content
MalwareWiki

Malware

PolarEdge

According to Sekoia, this is a form of TLS backdoor containing pre-defined commands.

PolarEdge is a Linux malware family.

Background

Sekoia describes this as a TLS backdoor that ships with a set of pre-defined commands. While their research first flagged Cisco routers as targets, they later found related payloads from the same family aimed at other hardware, including Asus, QNAP and Synology. One working theory is that devices infected with PolarEdge may serve as Operational Relay Boxes (ORB) supporting offensive cyber operations.

Source: Malpedia (Fraunhofer FKIE).